The host at this IP address (77.222.55.27) is either hijacked (compromised) or, more likely, operated by miscreants for the purpose of running port scans on other hosts in the internet. While we don’t know the purpose of the port scans originating from this IP address, such portscans are usually used to:
* Find vulnerable devices or services in the internet (with the purpose of exploiting them)
* Find open («insecure») configured services that can be used for DDoS amplification attacks against other hosts in the internet
* Find infected machines that can be (ab)used for malicious purpose
IP address (Source): 77.222.55.27
Hostname: 77-222-55-27.sarnor
AS number: AS44112
AS name: SWEB-AS
Country: RU
Below is a list of portscan events recorded from the referenced IP address: